Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa
File: 3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa (raw, json)
Hash identifier: b7J5ZHAXcSY0Xj1PSon6tEeZ1GDcJuT1aGzIBTYCrpo=
Subject key identifier: 02:0C:51:15:51:B9:25:9A:B4:3C:EA:67:91:9C:FB:E6:AA:5A:EF:2D
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 2690D5D7D86D7207EEECF2E0E503E6EAA94C2868
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa
Signing time: Thu 10 Apr 2025 00:54:01 +0000
ROA not before: Thu 10 Apr 2025 00:49:01 +0000
ROA not after: Thu 09 Apr 2026 00:54:01 +0000
asID: 152672
IP address blocks: 146.19.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:90:d5:d7:d8:6d:72:07:ee:ec:f2:e0:e5:03:e6:ea:a9:4c:28:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Apr 10 00:49:01 2025 GMT
Not After : Apr 9 00:54:01 2026 GMT
Subject: CN=020C511551B9259AB43CEA67919CFBE6AA5AEF2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ea:18:e7:e1:f0:56:a7:00:9d:32:83:ce:93:
15:32:23:8e:60:89:20:05:6e:ed:92:f5:a1:b1:0b:
8d:62:30:96:90:08:b8:71:75:b3:7a:3a:2a:0d:8a:
ca:41:87:45:ab:93:df:8c:8c:7c:59:99:c7:5f:19:
84:b7:23:9c:0b:2a:63:4b:49:5f:41:a6:3a:8a:8e:
3b:fc:55:73:34:3c:05:7e:34:fe:fb:79:c9:08:56:
ce:14:65:28:5c:88:4b:6d:9f:98:dd:b3:fb:a8:4e:
11:27:37:bd:2f:df:6f:f5:cb:0b:d4:d6:9e:31:9e:
8e:e1:f5:f6:70:4f:6c:d3:cb:80:c1:80:c0:3a:d4:
80:0e:f1:d3:d7:43:d5:2b:82:98:68:d7:19:5b:7e:
86:20:d5:4a:8a:d8:e8:89:b7:fc:d9:56:79:ca:01:
ba:0f:58:f9:8d:3b:10:a9:e5:52:e9:f8:44:02:e9:
e0:8b:7b:31:fe:60:52:24:2f:b4:8d:90:8c:c6:44:
2d:01:cc:e5:b9:9b:c0:72:26:71:6e:39:b7:4f:91:
d0:9f:96:b2:ab:e2:29:65:eb:14:a4:76:96:e8:60:
47:c2:5a:0d:2a:69:85:e2:8f:66:3b:44:a1:49:bb:
97:78:ae:62:a5:30:41:a9:f6:57:d8:62:af:45:eb:
65:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:0C:51:15:51:B9:25:9A:B4:3C:EA:67:91:9C:FB:E6:AA:5A:EF:2D
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.167.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:8d:05:94:fa:b4:a0:59:84:41:37:43:72:3e:7b:c0:b8:41:
f5:e5:b1:57:c2:01:c1:9c:9d:e6:16:ad:43:2c:e8:ac:fa:ca:
d8:4f:fc:bf:ea:a5:04:bc:c9:02:f5:ed:d3:13:7e:ff:af:0b:
0c:ba:f9:bc:a1:9e:ec:03:92:ca:b6:7a:74:b8:a8:45:71:a8:
74:b0:aa:e6:f2:c3:af:23:db:ae:e9:1d:0f:5f:b8:6b:41:3e:
c9:ab:f7:a0:b7:75:63:91:2c:f0:1e:f0:3f:0d:b0:c8:41:ae:
c6:17:3b:d5:ab:84:ed:01:4d:18:75:7c:59:9a:44:34:47:77:
fb:4d:b9:3c:86:a6:11:9d:bd:66:e0:14:6f:bc:ce:54:52:1d:
b4:04:9a:7e:be:9d:0c:ca:b7:98:19:cc:6c:e9:c9:c4:f4:32:
70:d5:7e:e9:c5:e1:38:e0:69:f8:1f:ea:62:2d:c8:7a:df:e8:
58:31:2b:74:8c:5a:bb:55:99:9b:89:c4:7a:2b:b0:35:cd:f2:
c6:ab:55:03:30:5e:3e:fa:2b:f0:74:d8:a8:21:15:bd:b0:5b:
8a:35:d1:c5:26:61:2a:3a:69:00:4e:e9:6c:5b:de:3e:98:7a:
0b:75:4f:e2:3b:b9:30:c8:bd:d7:02:7f:64:34:5c:1e:76:9b:
93:cd:f1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:23 2025 by rpki-client on console.sobornost.net